eScan Blog
eScan Website
eScan Forum
eScan Feeds From eScan Wiki
(Difference between revisions)
| Revision as of 12:22, 3 December 2009 Marian (Talk | contribs) (→'''Status im Hauptfenster des Schutz-Center''') ← Previous diff |
Revision as of 12:25, 3 December 2009 Marian (Talk | contribs) (→'''Konfiguration''') Next diff → |
||
| Line 23: | Line 23: | ||
| :<U><I>Status</I></U> | :<U><I>Status</I></U> | ||
| - | :*Mailvirenschutzstatus – This will display the status of the Mail Anti-virus in Disabled or Running mode. | + | :*Mailvirenschutzstatus – Zeigt den Status vo Mailantivirus an. Der Modus kann Deaktiviert oder Aktiv sein. |
| :*Maßnahme – This will display the action to be taken on infected emails in Delete or Disinfect mode. | :*Maßnahme – This will display the action to be taken on infected emails in Delete or Disinfect mode. | ||
| Line 129: | Line 129: | ||
| ::# Folgende Anhangstypen nicht archivieren - With this option certain file types can be excluded from being archived, for example - *.vcf, *.htm, *.html, etc... | ::# Folgende Anhangstypen nicht archivieren - With this option certain file types can be excluded from being archived, for example - *.vcf, *.htm, *.html, etc... | ||
| ::# Buttons Browsen, Standard, OK, Abbrechen, Übernehmen | ::# Buttons Browsen, Standard, OK, Abbrechen, Übernehmen | ||
| - | |||
| =='''Reports'''== | =='''Reports'''== | ||
Revision as of 12:25, 3 December 2009
Diese Seite ist noch in Bearbeitung!
Mailvirenschutz (E-Mails scannen)
This section provides the description and settings of eScan's Mail Anti-Virus for scanning of emails.
Contents |
Beschreibung
Der Mailvirenschutz prüft alle ein- und ausgehenden Mails auf Viren, Spionageprogramme, werbefinanzierte Software und andere Schadobjekte. Wenn Sie den Mailvirenschutz starten, werden standardmäßig nur eingehende Emails gescannt.
Status im Hauptfenster des Schutz-Center
Das grüne Häkchen (√) zeigt an, dass der Mailvirenschutz aktiv ist und läuft.
Das rote Kreuz (X) zeigt an, dass der Mailvirenschutz gestoppt wurde und inaktiv ist.
Konfiguration
- Status
- Mailvirenschutzstatus – Zeigt den Status vo Mailantivirus an. Der Modus kann Deaktiviert oder Aktiv sein.
- Maßnahme – This will display the action to be taken on infected emails in Delete or Disinfect mode.
- Starten/Stoppen – Clicking stop / start button will disable or enable the Mail Anti-Virus.
- Einstellungen – To configure the Mail Anti-Virus for incoming / outgoing email scanning click on the Settings button.
- Benachrichtigung -
Einstellungen für Mailvirenschutz
I. Scanoptionen:-
- a) Anhangstypen blockieren-
- This setting contains a list of file extensions, which will be blocked / deleted at the MicroWorld Winsock layer (MWL - gateway level), if found in any email attachment (pop3 account) during scanning by Mail Anti-Virus. MicroWorld has a predefined list of known file extensions mostly propagated by Viruses.
- Additional file extensions to be blocked can be added in this section as per the user’s requirement
- Note: We do not recommend deleting the file extensions predefined by MicroWorld.
- Erweiterte Scanoptionen (- - -) Schaltfläche "Erweitert"
- i) Alle Anhänge der E-Mail löschen, falls Desinfizierung nicht möglich ist (default) - It would delete those infected attachments in an email, only when the attachment is non-disinfectable.
- Erweiterte Scanoptionen (- - -) Schaltfläche "Erweitert"
- ii) E-Mail komplett löschen, falls Desinfizierung nicht möglich ist(default) – It would delete the entire email if the attachments in it are non-disinfectable.
- iii) E-Mail komplett löschen, wenn ein Virus gefunden wird – It would delete any email infected with virus.
- iv) Unter Quarantäne gestellte Anhänge // Blockierte Anhänge unter Quarantäne stellen – It would quarantine the attachments that are listed in the Block Attachment types.
- v) Die ganze E-Mail löschen, falls sie einen blockierten Anhang enthält (default) – It would delete the email which has an attachment listed in the Block Attachment types.
- vi) E-Mail unter Quarantäne stellen, falls Anhänge nicht gescannt wurden – It would quarantine the email in case if the attachment(s) in it is not scanned.
- vii) Anhänge unter Quarantäne stellen, falls sie nicht gescannt wurden - It would quarantine the attachment in case if it is not scanned.
- Anhänge ausschließen (Weiße Liste) – Here the users can add the filename or the extensions of those files that should not be blocked and should be delivered to the user’s inbox. For e.g. If *.pif is listed in Block Attachments types and a file by the name e.g. abcd.pif is required to be allowed, then add abcd.pif can be added in the Exclude Attachments (White list) section. Adding *.pif files in this section will allow all *.pif to be delivered. We recommend adding the entire file name like abcd.pif.
- Note: The Exclude attachment list (White List) holds precedence over the Block Attachments types.
- b) Maßnahme –
- Here the action can be configured to be taken on an infected email.
- Desinfizieren – The infected email will be disinfected.
- Löschen – The infected email will be deleted.
- Infizierte Dateien unter Quarantäne stellen - The infected email will be quarantined and the quarantined folder path can be set. The default path is C:\PROGRA~1\eScan\Quarant and this can be set to a different folder as per users requirement by clicking on the select path button (---).
- Here the action can be configured to be taken on an infected email.
Porteinstellung
- c) Mailservereinstellungen –
- This setting is required to be configured for eScan to send an email notification to the user informing about the action taken on an email. This is useful for setting up an outbreak alert /notification /warning messages to the recipient, that are sent by eScan when it detects any violation or breach of security.
- SMTP-Mailserver – Enter the SMTP IP address of the mailserver of your company or you ISP.
- SMTP-Port – Enter the SMTP Port of the mailserver of your company or your ISP. By default port is 25. (You can confirm the same with your mailserver administrator or ISP).
- Benutzerauthentifizierung (Fak.) – Enter the user name if your mailserver requires Authentication for sending email.
- Authentifizierungspasswort (Fak.) - Enter the password if your mailserver requires Authentication for sending email.
- d) Porteinstellungen fürs E-Mail-Scannen –
- Here the ports used for incoming and outgoing of email are defined, in-order for the Mail Anti-Virus to scan the emails received / sent on the respective ports.
- Ausgehende E-Mail (SMTP) – By default the SMTP port is 25 (check with your mailserver administrator or your ISP).
- Eingehende E-Mail (POP3) – By default the POP3 port is 110 (check with your mailserver administrator or your ISP).
- Ausgehende E-Mails scannen – When this option is selected, Mail Anti-Virus will also scan outgoing emails.
- Here the ports used for incoming and outgoing of email are defined, in-order for the Mail Anti-Virus to scan the emails received / sent on the respective ports.
II. (De-)Komprimierungsoptionen:-
- Options in this section help in Internet Bandwidth Management:
- Ausgehende Anhänge komprimieren – This option when enabled will reduce the size of all outgoing attachments in an email by compressing them in zipped/compressed format. To enable this option, ensure that the Scan Outgoing Mails in the Port Settings for email/Web Scan of the Scan options is checked.
- Selbstentpackende Zip-Dateien erstellen – This option when enabled creates a self extractable zip file of the attachment, which when clicked on automatically uncompresses itself thereby eliminating the need at the receiver’s end from using any unzipping tool. This option needs incase the receiving user does not have any tool to uncompress/unzip the attachment.
- Eingehende Anhänge dekomprimieren – This option when enabled will automatically open/unpack the compressed file and be scanned and delivered to the user.
- Eingehende Anhänge (der lokalen Domäne) dekomprimieren – This option when enabled will automatically open/unpack the compressed file and be scanned when sent within the local domain.
- Dateien mit diesen Erweiterungen nicht komprimieren (Folgende Anhänge ausschließen) – This option is helpful in excluding the file types {attachments} that need not be compressed when being sent out.
- Komprimierungsoptionen –
- Komprimieren, nur wenn Komprimierungsrate > ist als % – The default value set is 25%. This will compress all attachments in emails to 25 % or more.
- Komprimieren, wenn der Anhang > ist als (KB) – The default value set is 50. This will compress all attachments that are and above 50 KB in size and not below.
- Komprimierungsrate wählen – The default value set is to "Max. Geschwindigkeit". This option will utilize the system resources to the best and compress the attachments in emails and send it at much quicker rate. "Max. Komprimierung" mode will try to compress the attachments to the maximum.
III. Schwachstellen I –
- Internet Explorer (IE) has vulnerabilities and using them as the base, malwares easily transmit themselves on to systems and email clients like Outlook and Outlook Express thus making it easier for malware authors to get their malicious code propagating.
- To overcome this, MicroWorld with it’s proactive security range of solutions is committed to securing your data and system from such vulnerabilities.
- Anhänge mit CLSID-Erweiterung löschen - this option is enabled by default. It deletes Class ID file extensions [CLSID - files that are hidden and do not show the actual file extension] to prevent dangerous files from exploiting the vulnerabilities of IE.
- Skripte enthaltende HTML-Anhänge löschen - In general, eMails are sent and received in different formats and one of them being HTML, this HTML can have Scripts (similar to a batch file - .bat) with Tags to perform a particular or a set of task/s (embedded). Such emails when encountered are deleted to prevent exploiting the vulnerabilities.
- Skript- und Inhaltsüberprüfung für E-Mails "Von" deaktivieren => deaktiviert - this option is useful when you know and want to add a user who is genuine and sends legitimate html email with scripts. Once added, (for example - abc@xyz.net or *@xyz.net) all emails coming from this user or domain would automatically be delivered to the receiver’s inbox/mailbox.
- Skript- und Inhaltsüberprüfung für E-Mails "An" deaktivieren => deaktiviert - this option is useful when you know and want to add a user who is genuine and sends legitimate html email with scripts. Once added, (for example - suzanne@xyz.net or *@xyz.net) all emails being sent from this user or domain would automatically be delivered to the receiver’s inbox/mailbox.
IV. Schwachstellen II –
- 1. Maßnahmen => Maßnahme für E-Mails wählen, die Anhänge mit Mehrfachendungen enthalten – Action on attachments with multiple actions will be taken as below:
- Keine Maßnahme
- E-Mail löschen
- An Admin weiterleiten
- 2. Anhänge mit Mehrfachendungen für ZIP-Dateien erlauben – Compressed files / attachmend for eg.Zipped files with multiple files in it will be allowed to be delivered.
- 3. Für Dateitypen Anhänge mit Mehrfachendungen erlauben - In this section,file extensions can be added for allowing such attachments to be delivered to the users inbox.
- 1. Maßnahmen => Maßnahme für E-Mails wählen, die Anhänge mit Mehrfachendungen enthalten – Action on attachments with multiple actions will be taken as below:
V. Archivierung –
- E-Mails archivieren - This option is useful to archive or backup all emails that are sent and received via eScan. The folder or the path to this destination is customizable as per one’s requirements.The default path for mail archiving is %UserProfile%\Application Data\MicroWorld\eScan\Archive
- Archivierte E-Mails anzeigen
- Anhänge archivieren - This option is useful to archive or backup all email attachments that are sent and received via eScan. The folder or the path to this destination is customizable as per one’s requirements. The default path for the attachments archiving is %UserProfile%\Application Data\MicroWorld\eScan\Archive\Attachments
- Anhangsarchivverzeichnis
- Folgende Anhangstypen nicht archivieren - With this option certain file types can be excluded from being archived, for example - *.vcf, *.htm, *.html, etc...
- Buttons Browsen, Standard, OK, Abbrechen, Übernehmen
Reports
- ** Not there in the product as a title ** Statistics
- Gesamtzahl der gescannten E-Mails – This will display the total mails scanned by Mail Anti-Virus on real time basis.
- Gesamtzahl der infizierten Objekte – This will display the total virus / malwares detected by Mail Anti-Virus on real time basis.
- a. Archivierte E-Mails ansehen – Clicking on View Archived Mails, will display the backed up / archived emails.
- b. Report – Clicking on View Report, will display a summary report of all the infected emails and action taken on the email.
